const generateFakeEmail = () => {
  const random = Math.random().toString(36).substring(2, 10);
  const timestamp = Date.now();
  return `user_${random}_${timestamp}@example.com`;
};
 
for (let i = 0; i < 1000; i++) {
  fetch('https://your-api-endpoint.com/signup', {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({ email: generateFakeEmail() }),
  });
}

npm install react-turnstile

NEXT_PUBLIC_TURNSTILE_SITE_KEY=your_site_key
TURNSTILE_SECRET_KEY=your_secret_key

import { Turnstile } from 'react-turnstile';
import { useState } from 'react';
 
export default function WaitlistForm() {
  const [email, setEmail] = useState('');
  const [token, setToken] = useState('');
  const [status, setStatus] = useState('');
 
  const handleSubmit = async (e) => {
    e.preventDefault();
 
    if (!token) {
      setStatus('Please wait for verification ⏳');
      return;
    }
 
    const res = await fetch('/api/signup', {
      method: 'POST',
      headers: { 'Content-Type': 'application/json' },
      body: JSON.stringify({ email, token }),
    });
 
    const data = await res.json();
 
    if (res.ok) {
      setStatus('You are on the waitlist! 🎉');
      setEmail('');
    } else {
      setStatus(data.error || 'Something went wrong ❌');
    }
  };
 
  return (
    <form onSubmit={handleSubmit}>
      <input
        type='email'
        value={email}
        onChange={(e) => setEmail(e.target.value)}
        placeholder='Enter your email'
        required
      />
 
      <Turnstile
        sitekey={process.env.NEXT_PUBLIC_TURNSTILE_SITE_KEY}
        onVerify={(token) => setToken(token)}
        onExpire={() => setToken('')}
      />
 
      <button type='submit' disabled={!token}>
        Join Waitlist
      </button>
 
      {status && <p>{status}</p>}
    </form>
  );
}

export async function POST(req) {
  const { email, token } = await req.json();
 
  if (!email || !token) {
    return Response.json(
      { error: 'Email and verification required' },
      { status: 400 }
    );
  }
 
  // Verify Turnstile token
  const verify = await fetch(
    'https://challenges.cloudflare.com/turnstile/v0/siteverify',
    {
      method: 'POST',
      headers: { 'Content-Type': 'application/json' },
      body: JSON.stringify({
        secret: process.env.TURNSTILE_SECRET_KEY,
        response: token,
      }),
    }
  );
 
  const result = await verify.json();
 
  if (!result.success) {
    return Response.json({ error: 'Bot detected 🤖' }, { status: 400 });
  }
 
  // Block fake email domains
  const blockedDomains = [
    'example.com',
    'test.com',
    'mailinator.com',
    'tempmail.com',
  ];
 
  const domain = email.split('@')[1].toLowerCase();
  if (blockedDomains.includes(domain)) {
    return Response.json({ error: 'Please use a real email' }, { status: 400 });
  }
 
  // Safe to save to Supabase now ✅
}

DELETE FROM waitlist WHERE email LIKE '%@example.com';